# royalcrest-lorin.net — SUSPICIOUS

> royalcrest-lorin.net is a low-risk phishing domain pretending to be a crypto trading platform. Stay alert and avoid sharing personal info on this site.

## Summary
PhishDestroy identifies royalcrest-lorin.net as a low-risk generic phishing threat impersonating a cryptocurrency trading platform branded as Royalcrest Lorin. The site falsely claims advanced AI autopilot trading features combined with verified security.

Supporting evidence includes its registration through NameCheap, Inc. on March 6, 2026, and resolution to the IP address 188.114.97.3. The domain was flagged by 2 out of 95 VirusTotal security vendors and appears on two security blocklists, indicating some recognition among threat detection services. The page title references an official crypto platform, aiming to deceive users into providing sensitive data.

Currently, royalcrest-lorin.net is offline, reducing immediate risk. Users should remain cautious of similar domains and avoid engaging with unsolicited crypto trading sites. PhishDestroy advises verifying site authenticity and employing updated security tools to mitigate exposure to phishing attempts like this one.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Royalcrest Lorin — Official Crypto Trading Platform with AI Autopilot, Verified Security and Stable Results

## Domain Intelligence
- Registered: 2026-03-06 13:07:01
- Registrar: NameCheap, Inc.
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["vivienne.ns.cloudflare.com", "wesley.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Netcraft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc2e5-89ea-76c9-817f-9f0032d6e7ba.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/royalcrest-lorin.net
- Wayback Machine: https://web.archive.org/web/https://royalcrest-lorin.net
- PhishDestroy: https://phishdestroy.io/domain/royalcrest-lorin.net/
- LLM endpoint: https://phishdestroy.io/domain/royalcrest-lorin.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/royalcrest-lorin.net/
Last updated: 2026-03-19